Method and System for Pre-Accessing Conference Telephone and Network Side Device

• US 20130142334A1
• Filed: 01/14/2011
• Published: 06/06/2013
• Est. Priority Date: 08/25/2010
• Status: Active Grant

• Current Assignee: ZTE Corporation
• Original Assignee: ZTE Corporation
• Inventors: Zhang, Baohua, Deng, Fangmin, Xue, Tao, Cao, Yaobin, Yu, Song
• Granted Patent: US 9,106,429 B2
• Time in Patent Office: Days
• US Class Current: 380/257
• CPC Class Codes: H04L 12/1822 Conducting the conference, e.g. admission, detection, selection or grouping of participants, correlating users to one or more conference sessions, prioritising transmission
• CPC Class Codes: H04L 12/1827 Network arrangements for conference optimisation or adaptation
• CPC Class Codes: H04M 2203/50 related to audio conference
• CPC Class Codes: H04M 2203/5009 Adding a party to an existing conference conducting a computer conference, e.g. admission detection H04L12/1822
• CPC Class Codes: H04M 2203/5027 Dropping a party from a conference conducting a computer conference, e.g. admission detection H04L12/1822
• CPC Class Codes: H04M 2203/5054 Meet-me conference, i.e. participants dial-in
• CPC Class Codes: H04M 2203/60 related to security aspects in telephonic communication systems network architectures or network communication protocols for network security H04L63/00
• CPC Class Codes: H04M 3/56 Arrangements for connecting several subscribers to a common circuit, i.e. affording conference facilities video conference systems H04N7/15
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/08 Access security

Abstract

A method for pre-accessing a conference telephone is disclosed in the present invention. The method includes that: a network side detects a received call whose target is a main control party after the main control party initiates an encryption conference telephone; the call is not accessed if the call is a non-encryption conversation; the call is allowed to be accessed if the call is an encryption conversation. A system for pre-accessing a conference telephone is also disclosed in the present invention, wherein, the system includes a pre-accessing processing unit and a call type detection unit of the network side. A network side device is also disclosed in the present invention. The present invention realizes the pre-accessing of the encryption conference telephone, thereby improving security of the encryption conversation as well as avoiding the problem that a user is frequently affected when performing the encryption conference telephone.

Claims

1. A method for pre-accessing a conference telephone, comprising:

a network side detecting a received call whose target is a main control party after the main control party initiates an encryption conference telephone, if the call is a non-encryption conversation, not accessing the call;

if the call is an encryption conversation, allowing to access the call.

2. The method according to claim 1, wherein,

the step of a network side detecting a received call whose target is a main control party comprises:

if a call establishment message of the call comprises a call type and the call type is encryption, the network side judging the call as the encryption conversation;

otherwise judging the call as the non-encryption conversation.

3. The method according to claim 2, wherein,

the call type is realized through a user—

user information element (UUIE) field in the call establishment message, and when content of the UUIE field is “

ENCRYPTION VOICE”

, that the call type is encryption is indicated.

4. The method according to claim 1, further comprising:

after the encryption conference telephone enters a conversation state, a terminal and the network side of the encryption conference telephone performing encryption and decryption on voice data of conversation according to a call type.

5. The method according to claim 4, wherein,

the step of performing encryption and decryption on voice data of conversation comprises:

a calling terminal using a cipher key (CK) of a sending party as an operational factor to encrypt uplink voice data, and uploading the encrypted voice data to the network side; and

after the network side receives the encrypted voice data and after performing decryption by using the CK of the sending party as the operational factor, using a CK of a receiving party as the operational factor to encrypt the voice data, and sending the encrypted voice data to a called terminal;

the called terminal using the CK of the receiving party as the operational factor to decrypt received downlink voice data.

6. The method according to claim 1, further comprising:

after the network side allows to access the call, the main control party deciding whether to answer and join the call into this encryption conference telephone.

15. The method according to claim 2, further comprising:

after the encryption conference telephone enters a conversation state, a terminal and the network side of the encryption conference telephone performing encryption and decryption on voice data of conversation according to the call type.

16. The method according to claim 3, further comprising:

after the encryption conference telephone enters a conversation state, a terminal and the network side of the encryption conference telephone performing encryption and decryption on voice data of conversation according to the call type.

7. A system for pre-accessing a conference telephone, comprising a pre-accessing processing unit and a call type detection unit of a network side, wherein,

the call type detection unit is configured to:

after receiving the conference telephone initiated by a main control party, detect a received call whose target is the main control party, and transmit a detection result to the pre-accessing processing unit;

the pre-accessing processing unit is configured to;

according to the detection result transmitted by the call type detection unit, if the call is a non-encryption conversation, not access the call;

if the call is an encryption conversation, allow to access the call.

8. The system according to claim 7, wherein,

the call type detection unit is configured to detect the call according to a following way:

if a call establishment message of the call comprises a call type and the call type is encryption, judging the call as the encryption conversation;

otherwise judging the call as the non-encryption conversation.

9. The system according to claim 8, further comprising a call type adding module in a terminal, wherein,

the call type adding module is configured to:

when the call is initiated, add the call type through a user—

user information element (UUIE) field in the call establishment message, and when content of the UUIE field is “

ENCRYPTION VOICE”

, that the call type is encryption is indicated.

10. The system according to claim 7, further comprising a network side hardware encryption module of the network side and a terminal hardware encryption module of a terminal, wherein:

the terminal hardware encryption module is configured to;

when the terminal is a terminal of a sending party, use a cipher key (CK) of the sending party as an operational factor to encrypt uplink voice data, and upload the encrypted voice data to the network side; and

when the terminal is a terminal of a receiving party, after receiving downlink voice data, use a CK of the receiving party as the operational factor to perform the decryption on the received downlink voice data;

the network side hardware encryption module is configured to;

after receiving the encrypted voice data uploaded by the sending party and after performing decryption by using the CK of the sending party as the operational factor, then use the CK of the receiving party as the operational factor to encrypt voice data, and send the encrypted voice data to the receiving party.

17. The system according to claim 8, further comprising a network side hardware encryption module of the network side and a terminal hardware encryption module of a terminal, wherein:

the terminal hardware encryption module is configured to;

when the terminal is a terminal of a sending party, use a cipher key (CK) of the sending party as an operational factor to encrypt uplink voice data, and upload the encrypted voice data to the network side; and

when the terminal is a terminal of a receiving party, after receiving downlink voice data, use a CK of the receiving party as the operational factor to perform the decryption on the received downlink voice data;

the network side hardware encryption module is configured to;

after receiving the encrypted voice data uploaded by the sending party and after performing decryption by using the CK of the sending party as the operational factor, then use the CK of the receiving party as the operational factor to encrypt voice data, and send the encrypted voice data to the receiving party.

18. The system according to claim 9, further comprising a network side hardware encryption module of the network side and a terminal hardware encryption module of the terminal, wherein:

the terminal hardware encryption module is configured to;

when the terminal is a terminal of a sending party, use a cipher key (CK) of the sending party as an operational factor to encrypt uplink voice data, and upload the encrypted voice data to the network side; and

when the terminal is a terminal of a receiving party, after receiving downlink voice data, use a CK of the receiving party as the operational factor to perform the decryption on the received downlink voice data;

the network side hardware encryption module is configured to;

after receiving the encrypted voice data uploaded by the sending party and after performing decryption by using the CK of the sending party as the operational factor, then use the CK of the receiving party as the operational factor to encrypt voice data, and send the encrypted voice data to the receiving party.

11. A network side device, comprising a pre-accessing processing unit and a call type detection unit, wherein,

the call type detection unit is configured to:

after receiving a conference telephone initiated by a main control party, detect a received call whose target is the main control party, and transmit a detection result to the pre-accessing processing unit;

the pre-accessing processing unit is configured to;

according to the detection result transmitted by the call type detection unit, if the call is a non-encryption conversation, not access the call;

if the call is an encryption conversation, allow to access the call.

12. The device according to claim 11, wherein,

the call type detection unit is configured to detect the call according to a following way:

if a call establishment message of the call comprises a call type and the call type is encryption, judging the call as the encryption conversation;

otherwise judging the call as the non-encryption conversation.

13. The device according to claim 12, wherein,

the call type detection unit detects the call through the call type added by a user—

user information element (UUIE) field in the call establishment message, and when content of the UUIE field is “

ENCRYPTION VOICE”

, that the call type is encryption is indicated.

14. The device according to claim 11, further comprising a network side hardware encryption module, wherein:

the network side hardware encryption module is configured to;

after receiving encrypted voice data that a terminal of a sending party uses a cipher key (CK) of the sending party as an operational factor to encrypt uplink voice data and upload the encrypted voice data to the network side device, and after performing decryption by using the CK of the sending party as the operational factor, then use a CK of a receiving party as the operational factor to encrypt voice data, and send the encrypted voice data to the receiving party.

19. The device according to claim 12, further comprising a network side hardware encryption module, wherein:

the network side hardware encryption module is configured to;

after receiving encrypted voice data that a terminal of a sending party uses a cipher key (CK) of the sending party as an operational factor to encrypt uplink voice data and upload the encrypted voice data to the network side device, and after performing decryption by using the CK of the sending party as the operational factor, then use a CK of a receiving party as the operational factor to encrypt voice data, and send the encrypted voice data to the receiving party.

20. The device according to claim 13, further comprising a network side hardware encryption module, wherein:

the network side hardware encryption module is configured to;

after receiving encrypted voice data that a terminal of a sending party uses a cipher key (CK) of the sending party as an operational factor to encrypt uplink voice data and upload the encrypted voice data to the network side device, and after performing decryption by using the CK of the sending party as the operational factor, then use a CK of a receiving party as the operational factor to encrypt voice data, and send the encrypted voice data to the receiving party.